Behavioral task
behavioral1
Sample
69cc4289ccc6bcd454b528830c315f99_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
69cc4289ccc6bcd454b528830c315f99_JaffaCakes118
-
Size
298KB
-
MD5
69cc4289ccc6bcd454b528830c315f99
-
SHA1
9cb76f75c7bf88860af7ea9081f8d1c331b16909
-
SHA256
bd5b4efe4515c40a2f6570029bd885076bb01f80205e4fb7ea87550be47040ab
-
SHA512
c56200167e324380062d87246377af305a6c13f17ced1c93b165191aa0c0e8004bcca13dbc077db68c4e999a5d9fed2831299b1349160804b7ed03789cdd48b1
-
SSDEEP
1536:w8A2qjbs06hDhwCrxtaRDdrdcGpI6830:sds06hDhFraFn6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69cc4289ccc6bcd454b528830c315f99_JaffaCakes118
Files
-
69cc4289ccc6bcd454b528830c315f99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE